الباحثون
رجوع
Mark D. Roth
باحث من
Google LLC
#35592
من 60,574
8.3
إجمالي CVSS
الثغرات
·
1
PT-2020-15892
2020-10-01
8.3
CVE-2020-25017
Envoy
Envoy
The issue arises because Envoy only considers the first value when multiple header values are present for some HTTP headers. Additionally, Envoy's setCopy() header map API does not replace all existing occurrences of a non-inline header.